diff options
Diffstat (limited to 'src/lib/libcrypto/ec/ecp_methods.c')
-rw-r--r-- | src/lib/libcrypto/ec/ecp_methods.c | 98 |
1 files changed, 1 insertions, 97 deletions
diff --git a/src/lib/libcrypto/ec/ecp_methods.c b/src/lib/libcrypto/ec/ecp_methods.c index 57efce0366..66bde292a8 100644 --- a/src/lib/libcrypto/ec/ecp_methods.c +++ b/src/lib/libcrypto/ec/ecp_methods.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ecp_methods.c,v 1.30 2025/01/11 14:53:46 tb Exp $ */ | 1 | /* $OpenBSD: ecp_methods.c,v 1.31 2025/01/11 15:02:42 tb Exp $ */ |
2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> | 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> |
3 | * for the OpenSSL project. | 3 | * for the OpenSSL project. |
4 | * Includes code written by Bodo Moeller for the OpenSSL project. | 4 | * Includes code written by Bodo Moeller for the OpenSSL project. |
@@ -276,100 +276,6 @@ ec_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, | |||
276 | } | 276 | } |
277 | 277 | ||
278 | static int | 278 | static int |
279 | ec_set_compressed_coordinates(const EC_GROUP *group, EC_POINT *point, | ||
280 | const BIGNUM *in_x, int y_bit, BN_CTX *ctx) | ||
281 | { | ||
282 | BIGNUM *p, *a, *b, *w, *x, *y; | ||
283 | int ret = 0; | ||
284 | |||
285 | y_bit = (y_bit != 0); | ||
286 | |||
287 | BN_CTX_start(ctx); | ||
288 | |||
289 | if ((p = BN_CTX_get(ctx)) == NULL) | ||
290 | goto err; | ||
291 | if ((a = BN_CTX_get(ctx)) == NULL) | ||
292 | goto err; | ||
293 | if ((b = BN_CTX_get(ctx)) == NULL) | ||
294 | goto err; | ||
295 | if ((w = BN_CTX_get(ctx)) == NULL) | ||
296 | goto err; | ||
297 | if ((x = BN_CTX_get(ctx)) == NULL) | ||
298 | goto err; | ||
299 | if ((y = BN_CTX_get(ctx)) == NULL) | ||
300 | goto err; | ||
301 | |||
302 | /* | ||
303 | * Weierstrass equation: y^2 = x^3 + ax + b, so y is one of the | ||
304 | * square roots of x^3 + ax + b. The y-bit indicates which one. | ||
305 | */ | ||
306 | |||
307 | if (!EC_GROUP_get_curve(group, p, a, b, ctx)) | ||
308 | goto err; | ||
309 | |||
310 | /* XXX - should we not insist on 0 <= x < p instead? */ | ||
311 | if (!BN_nnmod(x, in_x, p, ctx)) | ||
312 | goto err; | ||
313 | |||
314 | /* y = x^3 */ | ||
315 | if (!BN_mod_sqr(y, x, p, ctx)) | ||
316 | goto err; | ||
317 | if (!BN_mod_mul(y, y, x, p, ctx)) | ||
318 | goto err; | ||
319 | |||
320 | /* y += ax */ | ||
321 | if (group->a_is_minus3) { | ||
322 | if (!BN_mod_lshift1_quick(w, x, p)) | ||
323 | goto err; | ||
324 | if (!BN_mod_add_quick(w, w, x, p)) | ||
325 | goto err; | ||
326 | if (!BN_mod_sub_quick(y, y, w, p)) | ||
327 | goto err; | ||
328 | } else { | ||
329 | if (!BN_mod_mul(w, a, x, p, ctx)) | ||
330 | goto err; | ||
331 | if (!BN_mod_add_quick(y, y, w, p)) | ||
332 | goto err; | ||
333 | } | ||
334 | |||
335 | /* y += b */ | ||
336 | if (!BN_mod_add_quick(y, y, b, p)) | ||
337 | goto err; | ||
338 | |||
339 | if (!BN_mod_sqrt(y, y, p, ctx)) { | ||
340 | ECerror(EC_R_INVALID_COMPRESSED_POINT); | ||
341 | goto err; | ||
342 | } | ||
343 | |||
344 | if (y_bit == BN_is_odd(y)) | ||
345 | goto done; | ||
346 | |||
347 | if (BN_is_zero(y)) { | ||
348 | ECerror(EC_R_INVALID_COMPRESSION_BIT); | ||
349 | goto err; | ||
350 | } | ||
351 | if (!BN_usub(y, p, y)) | ||
352 | goto err; | ||
353 | |||
354 | if (y_bit != BN_is_odd(y)) { | ||
355 | /* Can only happen if p is even and should not be reachable. */ | ||
356 | ECerror(ERR_R_INTERNAL_ERROR); | ||
357 | goto err; | ||
358 | } | ||
359 | |||
360 | done: | ||
361 | if (!EC_POINT_set_affine_coordinates(group, point, x, y, ctx)) | ||
362 | goto err; | ||
363 | |||
364 | ret = 1; | ||
365 | |||
366 | err: | ||
367 | BN_CTX_end(ctx); | ||
368 | |||
369 | return ret; | ||
370 | } | ||
371 | |||
372 | static int | ||
373 | ec_points_make_affine(const EC_GROUP *group, size_t num, EC_POINT **points, | 279 | ec_points_make_affine(const EC_GROUP *group, size_t num, EC_POINT **points, |
374 | BN_CTX *ctx) | 280 | BN_CTX *ctx) |
375 | { | 281 | { |
@@ -1420,7 +1326,6 @@ static const EC_METHOD ec_GFp_simple_method = { | |||
1420 | .group_get_curve = ec_group_get_curve, | 1326 | .group_get_curve = ec_group_get_curve, |
1421 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1327 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
1422 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1328 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
1423 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | ||
1424 | .points_make_affine = ec_points_make_affine, | 1329 | .points_make_affine = ec_points_make_affine, |
1425 | .add = ec_add, | 1330 | .add = ec_add, |
1426 | .dbl = ec_dbl, | 1331 | .dbl = ec_dbl, |
@@ -1447,7 +1352,6 @@ static const EC_METHOD ec_GFp_mont_method = { | |||
1447 | .group_get_curve = ec_group_get_curve, | 1352 | .group_get_curve = ec_group_get_curve, |
1448 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1353 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
1449 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1354 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
1450 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | ||
1451 | .points_make_affine = ec_points_make_affine, | 1355 | .points_make_affine = ec_points_make_affine, |
1452 | .add = ec_add, | 1356 | .add = ec_add, |
1453 | .dbl = ec_dbl, | 1357 | .dbl = ec_dbl, |